topic Re: HTTP application override in Automation/API Discussions

HTTP application override

MarioR — Wed, 07 Aug 2013 02:02:06 GMT

I need a method to allow all HTTP traffic from a group of source addresses to any destination, regardless of port or other application definition. I thought of using the application override with a custom applicaiton but not sure how to write the custom app to identify only HTTP. Would I use the custom app parent app of with a predefined app or do I use a critieria in the signature tab of the custom application.

Re: HTTP application override

sraghunandan — Wed, 07 Aug 2013 05:12:31 GMT

the following doc will help:-

https://live.paloaltonetworks.com/docs/DOC-1966

if you want to setup port based apps then the following will help:-

https://live.paloaltonetworks.com/docs/DOC-1071

https://live.paloaltonetworks.com/docs/DOC-2816

Re: HTTP application override

MarioR — Wed, 07 Aug 2013 14:53:59 GMT

Thank you for the referenced documents. I have read through them but cannot find how to identify ALL HTTP.

Re: HTTP application override

MarioR — Thu, 15 Aug 2013 23:01:20 GMT

I have read through the documentation. Is there a pattern match for TCP or can i use the HTTP/1.1 to identify it? The documentation says the HTTP versions is available elsewhere but I cannot locate it.